On 25/11/16 10:18, geoff.sa_users_161...@alphaworks.co.uk wrote:
X-Antivirus: avast! (VPS 161124-7, 24/11/2016), Inbound message X-Antivirus-Status: Infected X-Attachment: INVOICE_<removed>.zip#1783656308|>HQ2s9y6f.js Virus: JS:LockyDownloader [Trj] Deleted
Your AV correctly identified the bad attachment - generally these don't even get as far as SA in my setup This all depends on the glue used and ordering within your MTA and how it reacts to malware attachments Paul -- Paul Stead Systems Engineer Zen Internet